SAP Knowledge Base Article - Preview

3833441 - Assessing CVE-2026-44756 SAP Extended Passport vulnerability impact - SAP Commerce Cloud

Symptom

  • Request to verify whether CVE-2026-44756 affects SAP Commerce Cloud and to confirm potential impact and remediation
  • Inquiry concerns a memory corruption vulnerability related to SAP Extended Passport (EPP) handling in shared kernel logic
  • Exposure paths discussed include HTTP(S), SAP GUI, and RFC
  • No error messages or error codes were provided


Read more...

Environment

SAP Commerce Cloud

Product

SAP Commerce Cloud 2211 for JDK21

Keywords

CVE-2026-44756, Extended Passport, EPP, memory corruption, SAP NetWeaver kernel, SAP Web Dispatcher, SAP Commerce Cloud, vulnerability impact, security, HTTP, SAP GUI, RFC, not affected, risk assessment, mitigation , KBA , CEC-SCC-PLA-PL , Platform , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.